Group signature-based partner information sharing method and apparatus, and electronic device

Abstract

The invention discloses a partner information sharing method and device based on a group signature and electronic equipment, and relates to the field of financial science and technology, and the method comprises the steps: responding to a group joining request initiated by a newly-added partner, setting an identity label and an identity certificate for the newly-added partner by a financial branch institution, and storing the identity label and the identity certificate for the newly-added partner; and generating a group member signature private key of the newly added partner, calculating a revocation token and a token certificate corresponding to the current time period, updating a group member registration list, signing own customer credit rating information by the newly added partner by using the group member signature private key, and sharing a signature result to the group. And other partners in the group verify the signature result, and confirm the validity of the information and the correctness of the anonymous identity of the newly added partner based on the verification result. According to the method and the device, the technical problems that the group signature scheme lacks an effective verification mechanism, the authenticity and the integrity of information are difficult to ensure, and the credibility and the cooperation efficiency of partners are influenced in the related technologies are solved.

Description

Technical Field

[0001] The present invention relates to the field of financial technology or other related fields, and in particular to a method and device for sharing partner information based on group signatures, and an electronic device. Background Art

[0002] The rapid development of the digital age has prompted all industries to accelerate the pace of digital transformation, especially in the financial sector, where transactions and cooperation between financial institutions and their partners are becoming increasingly frequent. In response to this trend, financial institutions are transforming from single payment service providers to comprehensive solution providers, aiming to provide more comprehensive business support to partners. This in-depth cooperation often involves the participation of multiple parties, sharing customer data and credit rating information, and has become an indispensable part of the cooperation ecosystem.

[0003] For the same project, financial institutions may conduct business cooperation with multiple partners. Each partner can act as a group to share information and achieve win-win results during the entire project cooperation period. When sharing information, partners may not want to expose the relevant resource information they have, and hope to ensure anonymity while sharing information. At present, information sharing mainly adopts real-name authentication or simple anonymous publishing. Although real-name authentication guarantees the source and credibility of information, it lacks the protection of the privacy of the information sender and may expose the sensitive data of the partner. Although simple anonymous publishing protects the privacy of the information sender, it lacks an effective verification mechanism and is difficult to ensure the authenticity and integrity of the information, which affects the trust of the partner and the efficiency of cooperation.

[0004] Although the existing group signature technology solutions can provide a certain degree of anonymity and information verification, they are obviously insufficient in terms of anti-quantum attack and dynamic management (member joining and revocation). With the development of quantum computers, traditional encryption technologies based on complex mathematical problems may no longer be safe. Therefore, group signature solutions that resist quantum attacks have become a hot topic of research. At the same time, the dynamic changes in members' needs during project cooperation, such as the temporary withdrawal or rejoining of partners, require group signature solutions to be dynamic and flexible. Existing solutions often face the difficult problem of balancing efficiency and security when implementing these functions.

[0005] Currently, no effective solution has been proposed to address the problem that the group signature scheme in related technologies lacks an effective verification mechanism, making it difficult to ensure the authenticity and integrity of information, which affects the trust and cooperation efficiency of partners. Summary of the invention

[0006] The embodiments of the present invention provide a method and device for sharing information with partners based on group signatures, and an electronic device, so as to at least solve the technical problem in the related art that the group signature scheme lacks an effective verification mechanism, is difficult to ensure the authenticity and integrity of the information, and affects the trust of the partners and the cooperation efficiency.

[0007] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a partner information sharing method based on group signature is provided, which is applied to a group sharing system that deploys multiple partners, and the partners included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners that have business cooperation with the financial branch institutions. The partner information sharing method based on group signature includes: in response to a group joining request initiated by a newly added partner, the financial branch institution sets an identity identifier and an identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner; the financial branch institution calculates the revocation token and token certificate corresponding to the current time period based on the identity identifier and identity certificate of the newly added partner, and updates the group member registration list; the newly added partner uses the group member signature private key to sign its own customer credit rating information, and shares the signature result to the group; other partners in the group verify the signature result through the group public key of the group, and confirm the validity of the own customer credit rating information and the correctness of the anonymous identity of the newly added partner based on the verification result.

[0008] Optionally, the cooperation partners included in the group also include a cloud server and a key generation center, and the cooperation partner information sharing method also includes: inputting security parameters into the key generation center; based on the security parameters, the key generation center uses a dynamic group key generation algorithm to generate public and private key pairs for the financial head office and each of the financial branch institutions, and outputs the group public key.

[0009] Optionally, the partner information sharing method based on group signature also includes: when it is detected that the current time period has ended, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, when it is detected that there is a revoked partner in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, when it is detected that there is a new partner in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period.

[0010] Optionally, the partner information sharing method based on group signature also includes: setting a tracking public key and a tracking private key, and sending the tracking private key to the financial branch institution, which sends the tracking private key to each partner; initializing a partner registration counter, a revocation list and a token key list, wherein the partner registration counter is used to record the number of partners that have project cooperation with each of the financial branch institutions, the signature result of the terminated partner corresponding to each revocation token in the revocation list cannot pass identity authentication, and the token key list is used to save the revocation token key corresponding to the terminated partner that has added the revocation token.

[0011] Optionally, the partner information sharing method based on group signature also includes: when the project cooperation between any partner in the group and the financial branch institution is suspended or the project cooperation is terminated, confirming that the partner is a terminated partner; the financial branch institution adds the revocation token of the terminated partner to the revocation list, and adds the revocation token key of the terminated partner to the token list.

[0012] Optionally, the partner information sharing method based on group signature also includes: after receiving the identity recovery request initiated by the terminated partner, the financial branch institution reviews the project cooperation information of the terminated partner; if the review result is passed, the financial branch institution deletes the revocation token corresponding to the terminated partner from the revocation list.

[0013] Optionally, the partner information sharing method based on group signature also includes: when the verification result indicates that the other partners have objections to the credit rating information of the newly added partner's own customers, the financial head office institution in the group finds the identity information of the objecting partner by tracing the private key; the financial head office institution outputs a penalty factor to the partner who uploaded the credit rating information of its own customers, and the penalty factor is used to deal with violations.

[0014] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a partner information sharing device based on group signature is provided, which is applied to a group sharing system that deploys multiple partners, and the partners included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners that have business cooperation with the financial branch institutions. The partner information sharing device based on group signature includes: a partner private key generation unit, which is used to respond to a group joining request initiated by a newly added partner, and the financial branch institution sets an identity identifier and an identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner. key; a registration list updating unit, used by the financial branch institution to calculate the revocation token and token certificate corresponding to the current time period based on the identity identification and identity certificate of the newly added partner, and update the group member registration list; a signing unit, used by the newly added partner to sign the credit rating information of its own customers using the group member signature private key, and share the signature result to the group; a signature verification unit, used by other partners in the group to verify the signature result through the group public key of the group, and confirm the validity of the credit rating information of the own customers and the correctness of the anonymous identity of the newly added partner based on the verification result.

[0015] Optionally, the cooperation objects included in the group also include a cloud server and a key generation center, a virtual device for sharing information between cooperation parties, and also include: a parameter input unit, used to input security parameters to the key generation center; a dynamic key generation unit, used to generate dynamic public and private key pairs for the financial head office and each of the financial branch institutions based on the security parameters and using a dynamic group key generation algorithm, and output a group public key.

[0016] Optionally, the virtual device for sharing partner information also includes: a time period detection unit, which is used to trigger the update of the group signature private key when it is detected that the current time period has ended; a group signature private key update unit, which is used to update the group signature private key of the financial branch institution and each partner in the group according to the signal of the time period detection unit; a revocation token update unit, which is used to update the revocation token corresponding to each partner in the previous time period to a revocation token corresponding to the current time period; and a dynamic partner detection unit, which is used to notify the group signature private key update unit and the revocation token update unit to update when it is detected that a revoked or newly added partner is in the group.

[0017] Optionally, the virtual device for sharing partner information also includes: a tracking key setting unit, used to set a tracking public key and a tracking private key, and send the tracking private key to the financial branch institution; a tracking key distribution unit, used by the financial branch institution to send the tracking public key to each partner; a dynamic management initialization unit, used to initialize a partner registration counter, a revocation list and a token key list, wherein the partner registration counter is used to record in real time the number of partners that have project cooperation with the financial branch institution, the revocation list is used to save the partner revocation token with an unverifiable signature result, and the token key list is used to save the revocation token key corresponding to the terminated partner who has added the revocation token.

[0018] Optionally, the virtual device for sharing partner information also includes: a project cooperation status detection unit, used to confirm that any partner in the group is a terminated partner when the project cooperation between the partner and the financial branch institution is suspended or terminated; a revocation management unit, used to add the revocation token of the terminated partner to the revocation list after the project cooperation status detection unit confirms the termination of the partner, and add the revocation token key of the terminated partner to the token key list to ensure the unverifiability of the signature of the terminated partner.

[0019] Optionally, the virtual device for sharing partner information also includes: an identity recovery request receiving unit, used to receive an identity recovery request initiated by the terminated partner; a project cooperation information review unit, used to review the project cooperation information of the terminated partner after receiving the identity recovery request; and an identity recovery processing unit, used to delete the revocation token corresponding to the terminated partner from the revocation list if the review result passes.

[0020] Optionally, the virtual device for sharing partner information also includes: a violation detection unit, used to trigger a tracking mechanism when the verification result indicates that the other partners have objections to the credit rating information of the newly added partner's own customers; a tracking unit, used by the financial head office institution to find the identity information of the objecting partner by tracking the private key; a penalty processing unit, used by the financial head office institution to output a penalty factor to the partner who uploaded the credit rating information of the own customers based on the result of the tracking unit, and the penalty factor is used to handle violations.

[0021] In order to achieve the above-mentioned purpose, according to another aspect of the present application, an electronic device is provided, comprising: a memory storing an executable program; and a processor for running the program, wherein when the program is running, any one of the above-mentioned methods for sharing partner information based on group signature is executed.

[0022] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a computer program product is provided, including computer instructions, which, when executed by a processor, implement the steps of any one of the above-mentioned methods for sharing partner information based on group signatures.

[0023] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is further provided, wherein the computer-readable storage medium includes a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the above-mentioned group signature-based partner information sharing methods.

[0024] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement any one of the above-mentioned group signature-based partner information sharing methods.

[0025] According to another aspect of an embodiment of the present invention, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps of any one of the above-mentioned methods for sharing partner information based on group signature are implemented.

[0026] In the present disclosure, the cooperation objects included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners that have business cooperation with the financial branch institutions. In response to the group joining request initiated by the newly added partner, the financial branch institution sets an identity identifier and identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner; the financial branch institution calculates the revocation token and token certificate corresponding to the current time period based on the identity identifier and identity certificate of the newly added partner, and updates the group member registration list; the newly added partner uses the group member signature private key to sign its own customer credit rating information, and shares the signature result to the group; other partners in the group verify the signature result through the group public key, and confirm the validity of the own customer credit rating information and the correctness of the anonymous identity of the newly added partner based on the verification result.

[0027] In the present disclosure, the system supports partners to use group members' signature private keys to sign their own customer credit rating information and share the signature results to the group. It can dynamically authorize partners to join the group to share information, and update keys at certain time intervals and when the group adds or revokes partner users, thereby achieving dynamic and forward security, ensuring the security of signatures before key leakage, and solving the technical problems in related technologies that group signature schemes lack an effective verification mechanism, making it difficult to ensure the authenticity and integrity of information, and affecting the trust of partners and cooperation efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0029] Figure 1 is a flowchart of an optional method for sharing partner information based on group signature according to an embodiment of the present invention;

[0030] Figure 2 is a schematic diagram of a forward-secure dynamic group signature system according to an embodiment of the present invention;

[0031] Figure 3 is a schematic diagram of an optional partner information sharing device based on group signature according to an embodiment of the present invention;

[0032] Figure 4 The present invention is a hardware structure block diagram of an electronic device (or mobile device) for executing a partner information sharing method based on group signature according to an embodiment of the present invention. DETAILED DESCRIPTION

[0033] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0034] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0035] It should be noted that the information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) collected by this disclosure are information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data are in compliance with the relevant laws, regulations and standards of the relevant regions, necessary confidentiality measures are taken, and public order and good customs are not violated, and corresponding operation portals are provided for users to choose to authorize or refuse. For example, an interface is set up between this system and relevant users or organizations. Before obtaining relevant information, it is necessary to send an acquisition request to the aforementioned user or organization through the interface, and obtain relevant information after receiving the consent information fed back by the aforementioned user or organization.

[0036] The present invention is described in detail below in conjunction with various embodiments.

[0037] Embodiment 1

[0038] According to an embodiment of the present invention, an embodiment of a method for sharing partner information based on group signature is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0039] According to one aspect of the present application, a method for sharing information of a partner based on group signature is provided, which is applied to a group sharing system that deploys multiple partners, and the partners included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners that have business cooperation with the financial branch institutions. Among them, the number of financial branch institutions corresponding to a financial head office institution can be determined according to actual needs, and the financial head office institution can act as a manager to manage each partner and branch institution in the group.

[0040] This application provides Figure 1 The partner information sharing method based on group signature is shown. Figure 1 is a flowchart of an optional method for sharing partner information based on group signature according to an embodiment of the present invention, such as Figure 1 As shown, including:

[0041] Step S101, in response to a group joining request initiated by a newly added partner, the financial branch institution sets an identity identifier and an identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner.

[0042] When a new partner (e.g., a payment service provider or data service provider) wishes to join an information sharing group managed by a financial branch institution, it first initiates a formal group joining request. This group joining request contains the basic information of the partner, such as the name of the institution, business scope, and contact information, for the financial branch institution to conduct a preliminary qualification review. After passing the review, the financial branch institution sets a unique anonymous identity for the new partner. This identity is used to anonymously identify and track the partner in the group without revealing its true identity. Usually, the identity is a string of randomly generated numbers or letters, but here it will be combined with group signature technology to achieve a higher degree of anonymity and security. The financial branch institution uses a specific algorithm of the group signature scheme to generate an identity certificate for the new partner. The identity certificate is a credential that proves that the partner has the right to send signed information in the group. It can contain the partner's identity and a digital certificate signed by the group administrator (i.e., the financial branch institution) to ensure its legitimacy and credibility.

[0043] It should be noted that in this embodiment, the financial branch also generates a group member signature private key for the newly added partner, and this signature private key will be used for subsequent signature operations. The signature private key generation process must ensure that it is closely bound to the identity and certificate. At the same time, considering the dynamic nature of the group, the signature private key is only valid within a specified time period to support the subsequent revocation and update mechanism.

[0044] In step S102, the financial branch institution calculates the revocation token and token certificate corresponding to the current time period based on the identity identifier and identity certificate of the newly added partner, and updates the group member registration list.

[0045] The financial branch institution first determines the current time period, which is usually based on a preset cycle length, such as weekly, monthly, or part of a project cycle. The setting of the time period is crucial for member revocation and key update in the dynamic group signature scheme.

[0046] Based on the identity certificate of the newly added partner and the current time period, the financial branch calculates a revocation token. The revocation token is used to revoke the partner's signing authority under certain conditions, ensuring that once the partner is terminated or suspended, its previous signature will no longer be considered valid. The calculation of the revocation token must take into account forward security and dynamism to ensure that even if the private key is leaked, the signature in the previous time period is still valid.

[0047] At the same time, corresponding to the revocation token, the financial branch generates a token certificate to prove the validity of the revocation token. This token certificate is also calculated based on the identity certificate and the current time period. For other members in the group, the token certificate is the basis for verifying whether the revocation token is legal.

[0048] After completing the above operations, the financial branch institution updates the group member registration list and adds the identity identification, identity certificate, signature private key summary information of the newly added partner, as well as the information of revoked tokens and token certificates to the list. In this way, the member status and token information of the entire group can be synchronized to support subsequent member management operations.

[0049] In step S103, the newly added partner signs its own customer credit rating information using the group member's signature private key and shares the signature result with the group.

[0050] It should be noted that the newly added partners in this embodiment need to prepare in advance the customer credit rating information to be shared. This information may include credit scores, transaction histories, risk assessments, etc., but any sensitive data that may directly expose the customer's identity should be excluded.

[0051] The newly added partner signs the customer credit rating information using the group member signature private key generated in step S101. The signing process not only ensures the integrity and authenticity of the information, but also protects the anonymity of the partner, avoiding the disclosure of their true identity while sharing information.

[0052] After completing the signature, the newly added partner will upload the signature result (including the signed information and the signature itself) to the information sharing platform, which is the group sharing area hosted by the cloud server. Here, the signature result will be made public to all other partners in the group, promoting information exchange and trust building between partners.

[0053] In step S104, other partners in the group verify the signature result using the group public key, and confirm the validity of the own customer credit rating information and the correctness of the anonymous identity of the newly added partner based on the verification result.

[0054] The other partners in the group mentioned in this embodiment use the group public key to verify the received signature result. The group public key is generated by the key generation center and shared among all partners to verify whether the signature of any group member is valid.

[0055] It should be noted that the verification process of the signature result in this embodiment includes checking whether the signature correctly corresponds to the customer credit rating information and confirming whether the signer is still authorized to sign in the group within the current time period. This step relies on the verification algorithm of the group signature scheme to ensure that only legal and unrevoked signatures can pass the verification. After verifying the validity of the signature, the partner further confirms whether the anonymous identity of the signer is correct, that is, whether the signer is a legal member of the group. This is achieved through the unique anonymous identity confirmation mechanism in the verification algorithm, ensuring that even if a signature is known to be valid, the specific identity of the signer cannot be traced back. Once the signature result is verified, the partner can confirm the authenticity of the customer credit rating information and the correctness of the anonymous identity of the partner, so as to adopt this information for their own business decisions, such as risk assessment of new customer acquisition. This not only accelerates information sharing, but also enhances trust and cooperation in the pan-financial ecosystem. It can effectively ensure the authenticity and integrity of information while maintaining the anonymity of the partner, providing a safe and efficient information sharing platform for business cooperation in financial scenarios.

[0056] Through the above implementation steps, the system supports partners to use group members' signature private keys to sign their own customer credit rating information and share the signature results to the group. It can dynamically authorize partners to join the group to share information, and update keys at certain time intervals and when the group adds or revokes partner users, thereby achieving dynamic and forward security, ensuring the security of signatures before key leakage, and solving the technical problem that group signature schemes in related technologies lack effective verification mechanisms, making it difficult to ensure the authenticity and integrity of information, and affecting the trust of partners and cooperation efficiency.

[0057] Optionally, the cooperation partners included in the group also include a cloud server and a key generation center, and the cooperation partner information sharing method also includes: inputting security parameters into the key generation center; based on the security parameters, the key generation center uses a dynamic group key generation algorithm to generate public and private key pairs for the financial head office and each financial branch institution respectively, and outputs the group public key.

[0058] In the pan-financial scenario of this embodiment, in addition to the direct information sharing of the financial head office, financial branch institutions and partners, it also includes cloud servers and key generation centers. The cloud server is responsible for storing and distributing signed information, providing a unified information exchange platform for all partners. The key generation center is responsible for the core key management of the entire group signature scheme, including but not limited to the generation of dynamic group keys.

[0059] By inputting necessary security parameters such as encryption algorithm type and key length into the key generation center, the key generation center can use the dynamic group key generation algorithm to generate public and private key pairs for the head office and each branch institution. These key pairs not only ensure the secure transmission and verification of information, but also through the dynamic update mechanism, even if the key is leaked in a certain period of time, it will not affect the information security in the subsequent period of time. The group public key is open to the public and is used to verify the signature generated by any member of the group, while the group private key is securely retained by the key generation center for performing management operations such as generating revocation tokens and updating keys.

[0060] In addition, the partner information sharing method based on group signature of the present embodiment also includes: when it is detected that the current time period has ended, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, when it is detected that there is a revoked partner in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, when it is detected that there is a new partner in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period.

[0061] The embodiment of the present invention supports that when the end of the current time period is detected, the financial branch institutions and the partners in the group can automatically update the group signature private key to adapt to the new time period. The update process not only involves the generation of private keys, but also requires updating the revocation token of each partner in the previous time period to the revocation token corresponding to the current time period. This time period management mechanism is the core of the dynamic group signature scheme. It ensures forward security. Even if the private key is leaked within a certain time period, the signature generated in the previous time period is still valid and cannot be traced to the specific signer.

[0062] When a partner in the group changes, whether it is revoked or added, it will trigger the update of the group key. This dynamicity ensures the flexibility and security of the group, and can effectively manage group signatures and anonymity even in scenarios where members change frequently.

[0063] It should be noted that this embodiment also allocates a tracking key to the financial head office institution, and realizes information tracking of each partner through the tracking key. The partner information sharing method based on group signature also includes: setting a tracking public key and a tracking private key, and sending the tracking private key to the financial branch institution, and the financial branch institution sends the tracking private key to each partner; initializing the partner registration counter, revocation list and token key list, among which the partner registration counter is used to record the number of partners that have project cooperation with each financial branch institution, the signature result of the terminated partner corresponding to each revocation token in the revocation list cannot pass the identity authentication, and the token key list is used to save the revocation token key corresponding to the terminated partner who has added the revocation token.

[0064] In order to further enhance the security of the group signature scheme, the present invention sets a tracking public key and a tracking private key in the initial stage. The tracking public key is public, while the tracking private key is held by the financial head office and is used to track the identity of the anonymous signer when necessary. Through the tracking mechanism, the authenticity and integrity of the information can be ensured even in an anonymous environment.

[0065] This embodiment provides a partner registration counter, a revocation list, and a token key list, and initializing them is the starting point for dynamic management. The registration counter records the number of partners in the group for easy monitoring and management. The revocation list contains the revocation tokens of all revoked members, and the token key list stores the revocation token keys corresponding to the revoked tokens. This design ensures that only legitimate partners can share information in the group, effectively preventing partners whose services have been terminated or suspended from continuing to participate.

[0066] Optionally, the partner information sharing method based on group signature also includes: when the project cooperation between any partner in the group and the financial branch institution is suspended or the project cooperation is terminated, confirming the partner as a terminated partner; the financial branch institution adds the revocation token of the terminated partner to the revocation list, and adds the revocation token key of the terminated partner to the token list.

[0067] That is, when the project cooperation between any partner in the group and the financial branch institution is suspended or terminated for various reasons, the partner will be deemed to be a terminated partner. After confirming this status, the financial branch institution will add the revocation token of the terminated partner to the revocation list, and add the revocation token key to the token key list to ensure that the terminated partner loses the ability to sign effectively in the group. This step is the core of the revocation mechanism in the dynamic group signature scheme. It ensures that even if the partner withdraws, its previous signature cannot be verified normally, thereby maintaining the overall security and legitimacy of the group.

[0068] Another optional implementation manner, this embodiment also provides a recovery mechanism for partners who have lost their group identity. The partner information sharing method based on group signature also includes: after receiving an identity recovery request initiated by the terminated partner, the financial branch institution reviews the project cooperation information of the terminated partner; if the review result is passed, the financial branch institution deletes the revocation token corresponding to the terminated partner from the revocation list.

[0069] Under certain circumstances, the terminated partner can initiate an identity recovery request, which will be received and reviewed by the financial branch institution. The review process may involve re-evaluating the partner's business status, credit rating, etc. to ensure the legitimacy of its identity recovery. If the review result is passed, the financial branch institution will remove the terminated partner's revocation token from the revocation list and restore its signing authority in the group. This mechanism reflects the flexibility of the dynamic group signature scheme, allowing partners to rejoin under certain conditions without completely re-registering and setting up new keys.

[0070] Furthermore, this embodiment also provides a violation penalty mechanism, and the partner information sharing method based on group signature also includes: when the verification result indicates that other partners have objections to the credit rating information of the newly added partner's own customers, the financial head office institution in the group finds the identity information of the objecting partner by tracking the private key; the financial head office institution outputs a penalty factor to the partner who uploaded the credit rating information of its own customers, and the penalty factor is used to deal with violations.

[0071] This embodiment provides a method for handling objections from other partners in the group to the credit rating information of their own customers uploaded by the newly added partner. When the verification result shows that a partner has questioned the authenticity or integrity of the information, the head office of the financial institution can use the tracking private key to find the true identity of the objecting partner for further investigation. This tracking mechanism also provides a means of tracking violations while ensuring anonymity.

[0072] Once a violation is confirmed, the head office of the financial institution will output a penalty factor to the partner who uploaded the violation information. The penalty factor is a quantitative indicator used to measure the severity of the violation and determine the corresponding penalty measures. This may include but is not limited to temporarily or permanently revoking the group signature authority of the partner, removing it from the group, or imposing financial penalties on it. In this way, the present invention not only realizes anonymous information sharing, but also establishes an effective regulatory mechanism to maintain the authenticity of group information and the healthy operation of the cooperative ecology.

[0073] Another optional specific implementation is described in detail below.

[0074] The embodiment of the present invention provides a method for sharing information of partners based on dynamic group signature. Figure 2 is a schematic diagram of a forward-secure dynamic group signature system according to an embodiment of the present invention. Figure 2 As shown, the system includes a bank head office 201, a partner user 202, and a branch 203. Of course, in addition to the aforementioned units, the group signature scheme system may also include a cloud server 204 and a key generation center 205.

[0075] The key generation center 205 generates public and private key pairs for the bank head office 201 and the branch office 203 respectively, and outputs a group public key.

[0076] The branch institution 203 interacts with the partner user 202, the branch institution 203 sets the identity information and identity certificate for the partner user 202, generates the signature private key of the partner user 202, calculates the revocation token and token certificate for the time period t, and finally updates the registration list.

[0077] The partner user 202 can sign the credit rating information M of its own customers with the signature private key, share it and upload it to the cloud server 204. The other partner users can verify the signature Σ with the group public key to confirm the validity of the information, which is used for new customers to obtain risk ratings. When a new partner user joins the group, the branch institution 203 generates a group member signature private key for it; when the partner's project cooperation time expires or the partner chooses to suspend or terminate the service according to its own needs, the branch institution 203 can add the partner's revocation token and revocation token key to the revocation list and token list respectively. The signature of the revoked partner using the original signature private key will not pass the verification, which ensures the legitimacy of the group. When the partner needs to restore its legal identity, it only needs to delete its revocation token from the revocation list. This also means that a partner can be revoked in time period t1 and regain legal identity in time period t2 (t1>t2) without resetting the public and private keys. When the partners have disputes over shared information, the head office of the bank can find the true identity of the information signer by tracking the key, and impose corresponding penalties on the partners who upload the shared information in violation of the rules, thus ensuring the authenticity of the shared information. The branch 203 and the partner user 202 update the key at certain time intervals and when adding or removing partner users in the group, thus achieving dynamicity and forward security, and ensuring the security of the signature before the key is leaked.

[0078] The forward-secure dynamic group signature scheme includes the following eight algorithms: 01. Initialization algorithm, which inputs security parameters and then outputs system parameters; 02. Group key generation algorithm, which generates the public and private key pairs of group administrators and tracks the public and private key pairs of administrators, and the administrator generates a group member revocation list and a token list; 03. User joining protocol, which generates user private keys, revocation tokens and certificates; 04. Revocation algorithm, which revokes group members and updates the revocation token list and revocation list; 05. Key update algorithm, which updates group member private keys, revocation tokens and revocation lists; 06. Signature algorithm, which inputs the group public key, group member private key and message and outputs the signature of the message; Verification algorithm 07, which inputs the group public key, revocation list, time period, message and signature, and verifies whether the signer of the signature is revoked and the validity of the signature; 08. Tracking algorithm, which outputs the identity of the group member who signed the message by tracking the key. The following is an explanation of this embodiment in combination with these eight algorithms.

[0079] The forward-secure dynamic group signature scheme proposed in this invention includes 8 algorithms, assuming that the expected maximum number of group members is N=2 L The maximum time period is T = 2 d , where L,d∈Z + The specific algorithm is as follows.

[0080] Initialization algorithm GSetup(1 λ ): Enter security parameter 1 λ , select parameters n = Ο(λ), prime number q = poly(n), k = logq, m = 2nk, m′ = 2(n+L)k. For i∈{0,1,...,d}, select Gaussian parameters Output system common parameters

[0081] pp={λ,n,m,n′,q,L,d,s0,...,s d}.

[0082] Group key generation algorithm GKeyGen GM,TM (pp): The algorithm generates the public and private key pairs of the branch organization GM and the bank head office organization TM respectively, and outputs the group public key gpk.

[0083] GKeyGen GM :

[0084] 1) Run the TrapGen algorithm to get the matrix Trapdoor Set the branch public key mpk=A0 and private key msk=S0.

[0085] 2) Uniformly randomly select vector e, matrices A1, A2, B, and for b∈{0,1} and j∈[d], uniformly randomly select matrices

[0086] GKeyGen TM :

[0087] 1) Uniformly randomly select a matrix For i∈{1,2}, uniformly select the matrix S i ←{0,1} L×n , E i ←{0,1} L×m′ .

[0088] 2) Calculate the matrix D1 = S1·D0+E1, D2 = S2·D0+E2. Set the tracking public key tpk = (D0, D1, D2), the tracking private key tsk = S1, and send tsk to the branch institution GM.

[0089] Finally, the branch GM initializes the user registration counter c = 0 and cancels the list Token List And output the group public key

[0090]

[0091] User Joining Agreement<GUJoin(token sk ,t),GIssue(gpk,msk,t)>: The user interacts with the branch through the (pupk,pusk) registered in PKI.

[0092] 1) Users are randomly selected Then use pusk to make a common digital signature sig i =Sig pusk (x i ), and (sig i ,x i ) is sent to the branch institution GM.

[0093] 2) Branch GM receives (sig i ,x i ) and then verify x i Whether it has been registered, and then verify the validity of the signature through the corresponding pupk. If it fails to pass the verification, the joining process is terminated, otherwise continue with the following process. First, the group administrator GM sets the identity id for the user: = c∈[0,2 L -1], then generate the identity certificate cert index =Sign(msk,id) and update c:=c+1. Then determine the node set representing time. For node z∈Nodes (0→T-1) , if z = ⊥, then let usk[i][z] = ⊥. Otherwise, use d z To represent the length of z (dz <d), and calculate the matrix

[0094]

[0095] If d z = d, then generate vectors through the basis extension algorithm and the sampling algorithm

[0096] v i,z ← SampleD(ExtBasis(S0, A i,z ), e, s d ),

[0097] and set usk0[i][z] = v i,z ;

[0098] If 1 ≤ d z < d, then generate the trapdoor basis matrix through the basis extension algorithm and the basis randomization algorithm

[0099]

[0100] and set usk0[i][z] = S i,z .

[0101] The signature private key of the group member is usk0[i] = {usk0[i][z], z ∈ Nodes (0→T-1) , id, x i}. Then update usk0[i] to usk t [i] through the key update algorithm KeyUpdate. Calculate the revocation token token i,t = A i,t · x i , where A i,t represents A z when d i,z = d, and then generate the token certificate cert token = Sign(msk, token i,t ). Finally, the branch institution GM sends the group member certificate cert i = (cert index , cert token , id, token i，t ) to the group member and updates the registration list.

[0102] Revocation algorithm GRevoke(gpk, RL t, TL, t): The branch institution GM updates and publishes the revocation list RL in each time period. For the group member to be revoked, the branch institution GM sends the revocation token of the group member to the revocation list in time period t. i，t Add to the revocation list RL and set its x i Add to the token list TL. Finally, perform the update operation RL t =RL t ∪token i，t , TL t =TL t ∪x i RL will be released later t .

[0103] Key update algorithm KeyUpdate(gpk, usk t [i], token t , RL t , TL t , t+1): parse the group member’s private key usk t [i] = {usk t [i][z],z∈Nodes (t→T-1) ,id,x i}, and determine the node set Nodes (t+1→T-1) .

[0104] For z′∈Nodes (t+1→T-1 ), if z′=⊥, then let usk t+1 [i][z′]=⊥. Otherwise, there exists a z∈Nodes (t→T-1) It can be used as a prefix of z', that is, z'=z||h. There are the following two cases.

[0105] 1) If z′=z, that is, h is empty, then usk t+1 [i][z′]=usk t+1 [i][z].

[0106] 2) If z′=z||h, that is, h is not empty, there are two ways:

[0107] If d z′ = d, then the vector v is generated i，z′

[0108] v i，z′ ←SampleD(ExtBasis(S i，z , A i,z′ ), e, s d ),

[0109] And set usk t+1 [i][z′]=v i，z′ ;

[0110] If d z′ <d, then generate the trapdoor basis matrix S i，z′

[0111]

[0112] And set usk t+1 [i][z′]=S i，z′ .

[0113] Finally, the updated group member private key is: usk t+1 [i] = {usk t [i][z′],z′∈Nodes (t+1→T-1) ,id,x i}.

[0114] At the same time, all revoked tokens i，t Update to token i,t+1 For x i ∈TL t , group administrator calculates token i，t+1 =A i，z′ ·x i , where d z′ = d. Finally, the revocation list RL t Updated to RL t+1 and publish.

[0115] Signature algorithm GSign (gpk, usk t [i], M, t): According to the node set Nodes (t→T-1) , we can find one of z∈Nodes (t→T-1) So that z = bin(t), and usk t [i][z]=v i，z . Group members use the signature private key usk t [i]={v i，z ,id,x i}Sign the message M by following the steps below.

[0116] 1) For j∈{1,2}, uniformly randomly select a vector r j ←{0, 1} m′ , e0←χ m , e j，1 ←{0, 1} n , e j，2 ←{0, 1} L , and calculate

[0117]

[0118] 2) Generate a relationship about ξ=(v i，z , x i , r1, r2, e 1,1 , e 1,2 , e 2,1 , e 2,2 ,id) satisfies the following conditions of non-interactive zero-knowledge proof (NIZKAoK)Π gs :

[0119] i.(c 1,1 , c 1,2 ) and (c 2,1 , c 2,2 ) are all valid ciphertexts for encrypted identity IDs;

[0120] ii.A i，z ·v i，z =e mod q and ||v i，z || ∞ ≤β;

[0121] iii.w=B T ·A i,z ·x i +e0 mod q.

[0122] Among them, condition i can generate the corresponding zero-knowledge proof. i，z Expressed as [A id |A z ], then equation A i,z ·v i，z =e can be converted to A id v1+A z v2 = e. In order to ensure the anonymity of group members, A id It cannot be exposed directly. Therefore, this application will id =[A0|A1+idA2] is converted to So that A in the original equation id v1 can be converted to Therefore, conditions ii and iii can generate corresponding zero-knowledge proofs. Combining these three conditions into a zero-knowledge proof protocol The equation of and is public, is the secret value. Then, repeat the protocol This makes it reach a negligible rationality error and obtains a non-interactive zero-knowledge proof through the Fiat-Shamir conversion function in and It can be calculated by the commitment scheme aCommit. Finally, the output signature

[0123] ∑=(Π gs ,w,c 1,1 , c 1,2 , c 2,1 , c 2,2 ).

[0124] Verification algorithm GVerify(gpk,RL t ,M,∑,t): The verifier verifies the signature according to the following steps.

[0125] 1) Verify the zero-knowledge proof Π through the verification algorithm of the zero-knowledge proof protocol gs If any of the conditions is not met, 0 is returned;

[0126] 2) View the revocation list RL t For any token j，t ∈RL t , calculate w′=wB T Token i，t =B T ·(token i，t -token j，t ). If token i,t =token j，t , and ||w′|| ∞ ≤β, it means that the signer has been revoked, and 0 is returned; otherwise, 1 is returned.

[0127] Tracking algorithm G0pen(gpk, tsk, M, ∑): For a valid signature ∑, the bank head office TM uses the tracking private key tsk to track the identity of the signer through the following steps.

[0128] 1) Use the tracking private key tsk=S1 to decrypt and get the string b=bin(id)∈{0,1} L :calculate

[0129] 2) Computing identity Get the integer form and return the id.

[0130] Compared with the existing solutions, the forward-secure dynamic group signature scheme proposed in this embodiment is more secure. While achieving forward security and dynamism, the lengths of the group public key, group member private key and group signature are optimized, and the size of the group member's private key is independent of the number of members, which is more conducive to the expansion of the number of partners. Financial and banking institutions share information in the form of forward-secure dynamic group signatures to solve the performance problems of the existing solutions, such as insufficient privacy protection of partners, supervision of the authenticity of shared information, and insufficient efficiency.

[0131] The following is a detailed description in conjunction with another embodiment.

[0132] Embodiment 2

[0133] A partner information sharing device based on group signature provided in this embodiment includes multiple implementation units, each of which corresponds to each implementation step in the above-mentioned embodiment 1.

[0134] According to another aspect of the present application, a partner information sharing device based on group signature is provided, which is applied to a group sharing system that deploys multiple partners. The partners included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners that have business cooperation with the financial branch institutions.

[0135] Figure 3 is a schematic diagram of an optional partner information sharing device based on group signature according to an embodiment of the present invention, such as Figure 3 As shown, the partner information sharing device based on group signature may include: a partner private key generation unit 31, a registration list updating unit 32, a signature unit 33, and a signature verification unit 34.

[0136] The partner private key generation unit 31 is used to respond to the group joining request initiated by the new partner. The financial branch institution sets the identity identification and identity certificate for the new partner based on the partner information, and generates the group member signature private key of the new partner.

[0137] The registration list updating unit 32 is used by the financial branch institution to calculate the revocation token and token certificate corresponding to the current time period based on the identity identification and identity certificate of the newly added partner, and update the group member registration list.

[0138] The signature unit 33 is used for the newly added partner to sign its own customer credit rating information using the group member's signature private key, and share the signature result with the group.

[0139] The signature verification unit 34 is used to verify the signature result by other partners in the group through the group public key, and confirm the validity of the credit rating information of the own customers and the correctness of the anonymous identity of the newly added partner based on the verification result.

[0140] The schematic diagram of the above-mentioned partner information sharing device based on group signature, in which the partner private key generation unit 31 responds to the group joining request initiated by the newly added partner, the financial branch institution sets the identity identification and identity certificate for the newly added partner based on the partner information, and generates the group member signature private key of the newly added partner, through the registration list update unit 32, the financial branch institution calculates the revocation token and token certificate corresponding to the current time period based on the identity identification and identity certificate of the newly added partner, updates the group member registration list, through the signature unit 33, the newly added partner uses the group member signature private key to sign the credit rating information of its own customers, and shares the signature result to the group, through the signature verification unit 34, other partners in the group verify the signature result through the group public key of the group, and confirm the validity of the credit rating information of its own customers and the correctness of the anonymous identity of the newly added partner based on the verification result. In this embodiment, the system supports partners to use group member signature private keys to sign their own customer credit rating information and share the signature results to the group. Partners can be dynamically authorized to join the group to share information. At the same time, keys are updated at certain time intervals and when the group adds or revokes partner users, thereby achieving dynamic and forward security, ensuring the security of signatures before key leakage, and solving the problem that group signature schemes in related technologies lack effective verification mechanisms, making it difficult to ensure the authenticity and integrity of information, and affecting the trust of partners and cooperation efficiency.

[0141] Optionally, the cooperation objects included in the group also include a cloud server and a key generation center, a virtual device for sharing information between cooperation parties, and also include: a parameter input unit, used to input security parameters into the key generation center; a dynamic key generation unit, used to generate dynamic public and private key pairs for the financial head office and each financial branch institution respectively based on the security parameters and using a dynamic group key generation algorithm, and output the group public key.

[0142] Optionally, the virtual device for sharing partner information also includes: a time period detection unit, which is used to trigger the update of the group signature private key when it is detected that the current time period has ended; a group signature private key update unit, which is used to update the group signature private keys of the financial branch institution and each partner in the group according to the signal of the time period detection unit; a revocation token update unit, which is used to update the revocation token corresponding to each partner in the previous time period to a revocation token corresponding to the current time period; and a dynamic partner detection unit, which is used to notify the group signature private key update unit and the revocation token update unit to update when it is detected that a revoked or newly added partner is in the group.

[0143] Optionally, the virtual device for sharing partner information also includes: a tracking key setting unit, used to set a tracking public key and a tracking private key, and send the tracking private key to the financial branch institution; a tracking key distribution unit, used by the financial branch institution to send the tracking public key to each partner; a dynamic management initialization unit, used to initialize the partner registration counter, revocation list and token key list, wherein the partner registration counter is used to record in real time the number of partners that have project cooperation with the financial branch institution, the revocation list is used to save the partner revocation token with unverifiable signature results, and the token key list is used to save the revocation token key corresponding to the terminated partner who has added the revocation token.

[0144] Optionally, the virtual device for sharing partner information also includes: a project cooperation status detection unit, which is used to confirm that any partner in the group is a terminated partner when the project cooperation between the partner and the financial branch institution is suspended or terminated; a revocation management unit, which is used to add the revocation token of the terminated partner to the revocation list and add the revocation token key of the terminated partner to the token key list after the project cooperation status detection unit confirms the termination of the partner, so as to ensure the unverifiability of the signature of the terminated partner.

[0145] Optionally, the virtual device for sharing partner information also includes: an identity recovery request receiving unit, used to receive an identity recovery request initiated by the terminated partner; a project cooperation information review unit, used to review the project cooperation information of the terminated partner after receiving the identity recovery request; and an identity recovery processing unit, used to delete the revocation token corresponding to the terminated partner from the revocation list if the review result passes.

[0146] Optionally, the virtual device for sharing partner information also includes: a violation detection unit, which is used to trigger a tracking mechanism when the verification result indicates that other partners have objections to the credit rating information of the newly added partner's own customers; a tracking unit, which is used by the financial head office to find the identity information of the objecting partner by tracking the private key; and a penalty processing unit, which is used by the financial head office to output a penalty factor to the partner who uploaded the credit rating information of its own customers based on the result of the tracking unit, and the penalty factor is used to process the violation.

[0147] The above-mentioned partner information sharing device based on group signature may also include a processor and a memory. The above-mentioned partner private key generation unit 31, registration list update unit 32, signature unit 33, signature verification unit 34, etc. are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize corresponding functions.

[0148] The processor includes a kernel, and the kernel retrieves the corresponding program unit from the memory. One or more kernels can be set, and the method for sharing information of partners based on dynamic group signatures can be implemented by adjusting kernel parameters.

[0149] The above-mentioned memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one storage chip.

[0150] Embodiment 3

[0151] An embodiment of the present application may provide an electronic device, Figure 4 1 is a hardware structure block diagram of an electronic device (or mobile device) for executing a method for sharing partner information based on a group signature according to an embodiment of the present invention. Figure 4 As shown, the electronic device may include: one or more ( Figure 4 (only one is shown) processor 402, memory 404, storage controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0152] Among them, the memory can be used to store software programs and modules, such as program instructions / modules corresponding to the methods and devices in the embodiments of the present application, and the processor executes various functional applications and data processing by running the software programs and modules stored in the memory, that is, realizing the above-mentioned method. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0153] The processor can call the information and application programs stored in the memory through the transmission device to perform the following steps: in response to the group joining request initiated by the newly added partner, the financial branch institution sets an identity identifier and an identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner; the financial branch institution calculates the revocation token and token certificate corresponding to the current time period based on the identity identifier and identity certificate of the newly added partner, and updates the group member registration list; the newly added partner uses the group member signature private key to sign its own customer credit rating information, and shares the signature result to the group; other partners in the group verify the signature result through the group public key of the group, and confirm the validity of the own customer credit rating information and the correctness of the anonymous identity of the new partner based on the verification result.

[0154] The processor can also call the information and applications stored in the memory through the transmission device to perform the following steps: input security parameters to the key generation center; based on the security parameters, the key generation center uses a dynamic group key generation algorithm to generate public and private key pairs for the financial head office and each financial branch institution, and outputs the group public key.

[0155] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: when it is detected that the current time period has ended, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, when it is detected that there is a revoked partner in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, when it is detected that there is a new partner in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period.

[0156] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: Optionally, the partner information sharing method based on group signature also includes: setting a tracking public key and a tracking private key, and sending the tracking private key to the financial branch institution, and the financial branch institution sends the tracking private key to each partner; initializing the partner registration counter, revocation list and token key list, wherein the partner registration counter is used to record the number of partners that have project cooperation with each financial branch institution, the signature result of the terminated partner corresponding to each revocation token in the revocation list cannot pass the identity authentication, and the token key list is used to save the revocation token key corresponding to the terminated partner who has added the revocation token.

[0157] The processor can also call the information and applications stored in the memory through the transmission device to perform the following steps: when the project cooperation between any partner in the group and the financial branch institution is suspended or the project cooperation is terminated, confirm that the partner is a terminated partner; the financial branch institution adds the revocation token of the terminated partner to the revocation list, and adds the revocation token key of the terminated partner to the token list.

[0158] The processor can also call the information and application programs stored in the memory through the transmission device to perform the following steps: after receiving the identity recovery request initiated by the terminated partner, the financial branch institution reviews the project cooperation information of the terminated partner; if the review result is passed, the financial branch institution deletes the revocation token corresponding to the terminated partner from the revocation list.

[0159] The processor can also call the information and application programs stored in the memory through the transmission device to perform the following steps: when the verification result indicates that other partners have objections to the credit rating information of the newly added partner's own customers, the financial head office institution in the group finds the identity information of the objecting partner by tracking the private key; the financial head office institution outputs a penalty factor to the partner who uploaded the credit rating information of its own customers, and the penalty factor is used to deal with violations.

[0160] The system supports partners to use group members' private signature keys to sign their own customer credit rating information and share the signature results to the group. It can dynamically authorize partners to join the group to share information, and update keys at certain time intervals and when the group adds or revokes partner users, to achieve dynamic and forward security, ensure the security of signatures before key leakage, and solve the problem that group signature schemes in related technologies lack effective verification mechanisms, making it difficult to ensure the authenticity and integrity of information, and affecting the trust of partners and cooperation efficiency.

[0161] It can be understood by those skilled in the art that Figure 4 The structure shown is for illustration only, and the electronic device may also be a smart phone, a tablet computer, a PDA, a mobile Internet device (MID), a PAD, or other terminal devices. Figure 4 The structure of the electronic device is not limited. Figure 4 More or fewer components (such as network interfaces, display devices, etc.) shown in, or having Figure 4 Different configurations are shown.

[0162] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0163] Embodiment 4

[0164] The embodiment of the present application further provides a storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the partner information sharing method based on group signature provided in the first embodiment.

[0165] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is further provided, the computer-readable storage medium including a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the group signature-based partner information sharing methods in the above-mentioned embodiment 1.

[0166] Optionally, in this embodiment, the above storage medium may be located in any computer terminal in a computer terminal group in a computer network, or in any mobile terminal in a mobile terminal group.

[0167] The present application also provides a computer program product, including a computer program, which, when executed by a processor, implements the steps of the partner information sharing method based on group signature described in each embodiment of the present application.

[0168] The present application also provides a computer program product, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the partner information sharing method based on group signature described in each embodiment of the present application are implemented.

[0169] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0170] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0171] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0172] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0173] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0174] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

[0175] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for sharing information between partners based on group signature, characterized in that: A group sharing system applied to deploying multiple cooperation objects, wherein the cooperation objects included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners with business cooperation with the financial branch institutions, and the method for sharing partner information based on group signatures includes: In response to the group joining request initiated by the newly added partner, the financial branch institution sets an identity identifier and identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner; The financial branch institution calculates the revocation token and token certificate corresponding to the current time period based on the identity identifier and identity certificate of the newly added partner, and updates the group member registration list; The newly added partner signs its own customer credit rating information using the group member signature private key, and shares the signature result with the group; The other partners in the group verify the signature result through the group public key of the group, and confirm the validity of the own customer credit rating information and the correctness of the anonymous identity of the newly added partner based on the verification result.

2. The method for sharing information with partners according to claim 1, characterized in that: The cooperation partners included in the group also include a cloud server and a key generation center, and the cooperation partner information sharing method also includes: inputting security parameters into the key generation center; Based on the security parameters, the key generation center uses a dynamic group key generation algorithm to generate public and private key pairs for the financial head office and each of the financial branch institutions, and outputs a group public key.

3. The method for sharing information with partners according to claim 1, characterized in that: Also includes: When it is detected that the current time period has ended, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period; or, In the case where a revoked partner is detected in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to a revocation token corresponding to the current time period; or, When a new partner is detected in the group, the financial branch institution and each partner in the group update the group signature private key, and update the revocation token corresponding to each partner in the previous time period to the revocation token corresponding to the current time period.

4. The method for sharing information with partners according to claim 1, characterized in that: Also includes: Setting a public tracking key and a private tracking key, and sending the private tracking key to the financial branch institution, which then sends the private tracking key to each partner; Initialize the partner registration counter, revocation list and token key list, wherein the partner registration counter is used to record the number of partners that have project cooperation with each of the financial branch institutions, the signature result of the terminated partner corresponding to each revocation token in the revocation list cannot pass the identity authentication, and the token key list is used to save the revocation token key corresponding to the terminated partner added to the revocation token.

5. The method for sharing information with partners according to claim 4, characterized in that: Also includes: In the event that the project cooperation between any partner in the group and the financial branch institution is suspended or terminated, confirming the partner as a terminated partner; The financial branch institution adds the revocation token of the terminated partner to the revocation list, and adds the revocation token key of the terminated partner to the token list.

6. The method for sharing information with partners according to claim 4, characterized in that: Also includes: After receiving the identity restoration request initiated by the terminated partner, the financial branch institution reviews the project cooperation information of the terminated partner; If the audit result is passed, the financial branch institution deletes the revocation token corresponding to the terminated partner from the revocation list.

7. The method for sharing information with partners according to claim 4, characterized in that: Also includes: When the verification result indicates that the other partners have objections to the credit rating information of the new partner's own customers, the head office of the financial institution in the group finds the identity information of the objecting partner by tracing the private key; The financial head office outputs a penalty factor to the partner who uploads the credit rating information of its own customers, and the penalty factor is used to handle illegal behaviors.

8. A partner information sharing device based on group signature, characterized in that: A group sharing system for deploying multiple cooperation objects, wherein the cooperation objects included in the group include at least: a financial head office institution, multiple financial branch institutions, and partners with business cooperation with the financial branch institutions, and the partner information sharing device based on group signature includes: A partner private key generation unit, which is used to respond to a group joining request initiated by a newly added partner, and the financial branch institution sets an identity identifier and identity certificate for the newly added partner based on the partner information, and generates a group member signature private key for the newly added partner; A registration list updating unit, configured to calculate the revocation token and token certificate corresponding to the current time period based on the identity identifier and identity certificate of the newly added partner, and update the group member registration list; A signature unit, used for the newly added partner to sign the credit rating information of its own customers using the group member signature private key, and share the signature result with the group; The signature verification unit is used to verify the signature result by other partners in the group through the group public key of the group, and confirm the validity of the own customer credit rating information and the correctness of the anonymous identity of the newly added partner based on the verification result.

9. An electronic device, characterized in that: include: A memory storing an executable program; A processor is used to run the program, wherein the program, when running, executes the partner information sharing method based on group signature as described in any one of claims 1 to 7.

10. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the steps of the partner information sharing method based on group signature as described in any one of claims 1 to 7 are implemented.

Images